Lorelei

Privacy Policy

Last updated October 13, 2026

This Privacy Policy explains how [Company Legal Name] (“Lorelei,” “we,” “us”) collects, uses, shares, and protects information when you use the Lorelei mobile app, the Whisper feature, and our website (together, the “Service”).

1. Information we collect

Information you give us

• Account information. When you sign in with Apple, we receive a user identifier and, if you choose to share them, your name and email address (which may be an Apple private relay address).
• Profile and personalization. Optional details you choose for your heroine and your stories, such as a character name, appearance, personality, romantic preferences, preferred relationship dynamics, content intensity settings, and optional astrological information such as a star sign or birth date.
• Story activity. The choices you make, custom actions you type or speak, reading progress, bookmarks, checkpoints, and the story paths you create.
• Whisper conversations. The messages you send to characters and the responses generated for you.
• Voice input. If you use voice direction, your audio is sent to a speech-to-text provider to be converted into text. We keep the resulting text as part of your story. [Confirm: we do not retain audio recordings after transcription.]
• Waitlist and communications. Your email address if you join our waitlist, and anything you send us when you contact support.
• Reports. Information you include when you report content or another issue.

Information collected automatically

• Device and usage information. Device model, operating system, app version, language, time zone, IP address, and how you use features (for example, chapters opened and screens viewed).
• Diagnostics. Crash reports and performance data that help us find and fix problems.

Information from others

• Purchases. Apple processes all payments. We receive confirmation of what you bought, when, and its status (through Apple and our subscription provider), but never your card or bank details.
• Referrals. If someone invites you to Lorelei, we may learn that you joined through their invitation so we can grant any rewards.

2. How we use information

• To create your account and provide the Service, including generating stories, continuing them from your choices, and running Whisper conversations.
• To remember your story: decisions, relationships, events, and what each character knows, so your story stays consistent across sessions and devices.
• To personalize your stories and recommend stories you may enjoy.
• To process subscriptions, track gem balances and transactions, and grant rewards.
• To keep the Service safe, enforce our Terms of Service and content policies, and prevent fraud and abuse.
• To evaluate and improve story quality, continuity, and performance.
• To understand how the Service is used and fix bugs.
• To send you service messages and, where permitted, product updates. You can unsubscribe from marketing emails at any time.
• To comply with legal obligations and protect our rights.

3. AI story generation

Lorelei's stories and Whisper conversations are written by artificial intelligence. To generate your next scene or a character's reply, we send the relevant parts of your story, including your choices, messages, and the personalization details needed for that scene, to third-party AI model providers acting on our behalf.

We require these providers to process your information only to provide services to us. [Confirm with each provider's terms: providers may not use your content to train their own models.] We do not use your Whisper conversations or story inputs to train third-party models. [Confirm whether de-identified interactions will be used to improve Lorelei's own story systems, and describe that here.]

4. Sensitive information

Some optional personalization details, such as romantic preferences, may reveal information that is considered sensitive in some places, for example sexual orientation. You never have to provide these details to use Lorelei. If you do, we use them only to personalize your stories. We do not use them for advertising and do not sell or share them. You can change or delete them at any time in the app.

5. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only as follows:

• Service providers that help us run Lorelei under contracts limiting how they can use your information. These include providers of cloud hosting and databases ([e.g. Supabase]), AI model generation ([provider names]), speech-to-text ([provider name]), subscription management ([e.g. RevenueCat]), product analytics ([e.g. PostHog]), error monitoring ([e.g. Sentry]), content delivery and storage, and email.
• Apple, which handles sign-in and payments under its own privacy policy.
• Legal and safety reasons, when we believe in good faith that disclosure is required by law or needed to protect the rights, safety, or property of our users, the public, or Lorelei.
• Business transfers, such as a merger, acquisition, or sale of assets, in which case we will require the recipient to honor this policy.
• With your consent, or at your direction, for example when you share an excerpt of your story.

6. How long we keep it

We keep your account and story data while your account is active so your stories, checkpoints, and relationships are there when you return. If you delete your account, we delete or de-identify your personal information within [30] days, except where we must keep certain records, such as purchase and transaction records, for legal, tax, or fraud-prevention purposes. Waitlist emails are kept until launch communications end or you unsubscribe.

7. Your choices and rights

• Edit your profile. Personalization details are optional and editable in the app.
• Delete your account. You can delete your account and associated data from within the app at [Settings › Account › Delete account], or by contacting us.
• Access, correct, or export. You can ask for a copy of your information or ask us to correct it.
• Marketing. Use the unsubscribe link in any marketing email.
• Device permissions. You can turn off microphone access in your device settings at any time. Voice direction will stop working, but everything else will continue to work.

To make a request, email [privacy@yourdomain.com]. We may need to verify your identity before responding. We will not discriminate against you for exercising your rights.

8. Regional disclosures

United States residents

Depending on where you live (for example California, Colorado, Connecticut, Virginia, and other states with privacy laws), you may have the right to know what personal information we collect and how we use it, and to access, correct, delete, or obtain a portable copy of it. You may also have the right to opt out of the sale or sharing of personal information or targeted advertising (we do neither) and to limit the use of sensitive personal information (we use it only to provide the Service). You can use an authorized agent to make a request. If we deny your request, you may appeal by replying to our decision.

In the past 12 months, we collected the categories described in Section 1: identifiers, commercial information (purchases), internet or device activity, audio information (voice input), inferences used for recommendations, and sensitive personal information you choose to provide. We disclose these only to the recipients described in Section 5, for the purposes in Section 2.

European Economic Area, United Kingdom, and Switzerland

We process your information on these legal bases: to perform our contract with you (providing the Service), your consent (for optional sensitive details and certain communications, which you can withdraw at any time), our legitimate interests (keeping the Service safe, improving it, and understanding usage, balanced against your rights), and compliance with legal obligations. You have the rights to access, correct, delete, restrict, object to processing, and port your data, and to lodge a complaint with your local data protection authority. [Name EU/UK representative if required.]

9. Age requirement

Lorelei is only for adults aged 18 and older. We do not knowingly collect information from anyone under 18. If we learn that someone under 18 has created an account, we will delete it. If you believe a minor is using Lorelei, contact us at [privacy@yourdomain.com].

10. Security

We use administrative, technical, and physical safeguards to protect your information, including encryption in transit and access controls. No system is perfectly secure, so we cannot guarantee absolute security. If we learn of a breach affecting your information, we will notify you as required by law.

11. International transfers

We are based in [country] and our service providers may process information in other countries. When we transfer personal information internationally, we use appropriate safeguards such as Standard Contractual Clauses.

12. Changes to this policy

We may update this policy from time to time. If we make material changes, we will let you know in the app or by email before they take effect. The date at the top shows when it was last updated.

13. Contact us

[Company Legal Name]
[Street address]
[City, State/Region, Postal code, Country]
[privacy@yourdomain.com]